Authorizations in the IGEL UMS include:
The indirect rights given to an administrator on the basis of their group membership can be changed further for each administrator in the group. In this case, rights that were granted directly have precedence over those granted indirectly.
An administrator can be a member of several groups and receive the corresponding rights. If authorizations contradict each other, the withdrawal of an authorization takes precedence over the granting of it. If a prohibition regarding an action or object from a group is issued, it will overrule all rights from other groups.
Generally speaking, the same authorization settings are used for groups and administrators. The following description of individual configuration options for administrators therefore applies equally to groups too.